WordPress Tiny Bootstrap Elements Light plugin <= 4.3.34 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Aril Aprilio forsak3n in WordPress Plugin Tiny Bootstrap Elements Light versions = 4.3.34...

WordPress plugin Bei Fen 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The ordPress Bei Fen plugin has a file inclusion vulnerability that stems from not doing effective filtering of local file resource calls, which can be exploited by an attacker ...

PT-2025-39951

Name of the Vulnerable Software and Affected Versions Tiny Bootstrap Elements Light versions through 4.3.34 Description The Tiny Bootstrap Elements Light plugin for WordPress is susceptible to a Local File Inclusion issue via the language parameter. This allows unauthenticated attackers to includ...

WordPress plugin Tiny Bootstrap Elements Light 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

PT-2025-39952

Name of the Vulnerable Software and Affected Versions Bei Fen – WordPress Backup Plugin versions through 1.4.2 Description The Bei Fen – WordPress Backup Plugin for WordPress is susceptible to Local File Inclusion through the task parameter. Attackers with Subscriber-level access or higher can...

WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by dutafi in WordPress Plugin WordPress Social Login and Register versions = 7.7.0...

WordPress Greenify theme <= 2.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Greenify versions = 2.2...

CVE-2025-60153

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpshuffle Subscribe To Unlock subscribe-to-unlock allows PHP Local File Inclusion.This issue affects Subscribe To Unlock: from n/a through = 1.1.5...

CVE-2025-60126

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in PluginOps Testimonial Slider testimonial-add allows PHP Local File Inclusion.This issue affects Testimonial Slider: from n/a through = 3.5.8.6...

SUSE CVE-2025-59341

esm.sh is a nobuild content delivery networkCDN for modern web development. In 136 and earlier, a Local File Inclusion LFI issue was identified in the esm.sh service URL handling. An attacker could craft a request that causes the server to read and return files from the host filesystem or other...

WordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Subscribe To Unlock versions = 1.1.5...

WordPress Subscribe to Download Plugin <= 2.0.9 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Subscribe to Download versions = 2.0.9...

WordPress Testimonial Slider Plugin <= 3.5.8.6 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Testimonial Slider versions = 3.5.8.6...

CVE-2025-60150

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows PHP Local File Inclusion.This issue affects Subscribe to Download: from n/a through = 2.0.9...

CVE-2025-60153

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpshuffle Subscribe To Unlock subscribe-to-unlock allows PHP Local File Inclusion.This issue affects Subscribe To Unlock: from n/a through = 1.1.5...

CVE-2025-60126

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in PluginOps Testimonial Slider testimonial-add allows PHP Local File Inclusion.This issue affects Testimonial Slider: from n/a through = 3.5.8.6...

CVE-2025-60153 WordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpshuffle Subscribe To Unlock subscribe-to-unlock allows PHP Local File Inclusion.This issue affects Subscribe To Unlock: from n/a through = 1.1.5...

CVE-2025-60153 WordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpshuffle Subscribe To Unlock subscribe-to-unlock allows PHP Local File Inclusion.This issue affects Subscribe To Unlock: from n/a through = 1.1.5...

CVE-2025-60153

CVE-2025-60153 affects the Subscribe To Unlock WordPress plugin with a PHP Local File Inclusion (LFI) flaw in Include/Require usage. Described as a PHP Remote File Inclusion issue that effectively enables LFI. Affected versions: from n/a through 1.1.5. CVSSv3.1 base score 7.5 (HIGH), vector: AV:N...

CVE-2025-60150

CVE-2025-60150: In Subscribe to Download (WordPress plugin), an authenticated attacker can exploit Local File Inclusion via improper control of the filename in PHP include/require, affecting versions up to 2.0.9. The vulnerability is documented with a high impact (CVSS v3.1 base score 7.5) but ex...